Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          ht69EOMZjBH2IfmsVu3BBGLSkV5LAKBcD1vjDRKdMzw=
Subject key identifier:   86:EB:05:46:4C:F4:63:A9:DD:BC:A8:32:C8:B9:0D:E7:55:06:B0:0C
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       538DF4D9E46DA6878D3643AF9A6F7E63134AE968
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:34 +0000
ROA not before:           Thu 06 Mar 2025 00:55:34 +0000
ROA not after:            Thu 05 Mar 2026 01:00:34 +0000
asID:                     61637
IP address blocks:        2804:1c18:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8d:f4:d9:e4:6d:a6:87:8d:36:43:af:9a:6f:7e:63:13:4a:e9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:34 2025 GMT
            Not After : Mar  5 01:00:34 2026 GMT
        Subject: CN=86EB05464CF463A9DDBCA832C8B90DE75506B00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:4c:f6:40:db:56:70:cf:c9:0d:4f:c2:61:
                    51:1b:3d:e8:15:b9:66:ab:25:af:46:eb:12:ae:de:
                    44:63:5a:7e:a1:e0:0e:1f:42:56:32:52:3c:e9:fc:
                    ba:da:86:27:53:9f:ac:1b:b6:61:52:4b:bf:fa:a1:
                    40:82:48:95:9c:ba:19:d3:a0:72:88:65:bc:96:e0:
                    0d:c4:eb:a8:3a:67:fe:1e:8e:b4:7b:37:2d:d3:bf:
                    01:b3:e5:56:b6:40:ef:72:11:1e:ae:cf:34:f8:8a:
                    69:6b:7c:35:ae:e9:b2:e3:37:f8:2a:84:f6:b2:7d:
                    5a:cc:8e:b3:9f:fa:1a:89:74:8b:8e:01:42:65:59:
                    8a:15:93:0e:65:e9:4c:c5:9b:60:f7:46:31:d8:c8:
                    f7:b0:7c:16:2f:b1:c0:17:2b:20:18:dd:91:11:12:
                    c1:bd:91:8d:b8:d3:e4:ec:f6:7e:4d:a9:de:21:81:
                    e3:1e:b8:f1:f6:89:64:b7:77:e6:bb:d4:be:d3:d1:
                    7b:29:12:e0:b1:43:9b:86:2c:a7:39:7b:a2:f1:e9:
                    b0:71:3c:6f:01:cc:43:6c:25:91:fe:9c:8f:13:85:
                    ae:be:4e:37:65:e6:4a:e5:9d:14:1f:03:43:d0:a0:
                    42:91:78:81:01:b2:2f:f7:fc:61:80:04:6b:33:2a:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EB:05:46:4C:F4:63:A9:DD:BC:A8:32:C8:B9:0D:E7:55:06:B0:0C
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c3:06:3f:a0:8a:40:ad:31:9b:03:14:57:f3:f2:33:ef:2a:64:
         56:95:a8:61:27:4e:fd:83:bb:9d:14:71:7d:45:f1:1c:7d:59:
         48:0a:81:ed:2f:d0:00:f5:1e:57:f7:5a:dd:ee:14:ee:6f:31:
         ff:99:98:8c:a5:fc:e6:e0:71:9c:be:da:a3:a3:ca:04:ab:28:
         7b:b9:bd:5c:ad:62:e0:5e:d1:cb:e7:42:b9:65:da:9d:1c:bd:
         a3:04:65:6f:ce:89:86:d1:dc:46:7c:8e:4e:d7:12:da:e8:c8:
         07:ee:b9:30:41:5f:95:99:ab:4e:19:7b:e9:27:70:f6:d6:6b:
         19:c1:ca:de:4d:8c:ae:a5:b6:59:41:92:83:81:56:62:9e:35:
         76:4c:e1:ce:2f:f5:47:a5:ca:c7:21:a7:aa:0a:eb:7c:c2:b8:
         8e:b5:5d:f8:5e:f4:d9:4d:ce:93:b7:44:d7:1f:3c:16:86:e4:
         19:03:bb:93:58:53:41:8f:57:84:95:85:97:e4:fa:da:19:72:
         26:c0:26:b8:6b:7e:7f:bb:06:09:29:c3:f2:dc:bf:fa:ab:54:
         c2:da:aa:47:f7:e9:0a:8a:e8:96:ae:d5:7a:b7:cf:b5:d9:cd:
         5b:c5:88:f2:d1:40:71:3a:f0:21:ca:8d:a4:92:69:ee:58:41:
         73:f8:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:58 2025 by rpki-client